$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-ZrgXIFRRedo5pPMMVauSCW1ifw.roa File: -ZrgXIFRRedo5pPMMVauSCW1ifw.roa (raw, json) Hash identifier: lVv/EfOrJiRba8ht92nfnUFMfVyQclTTq/HBaeNPsB8= Subject key identifier: F9:9A:E0:5C:81:51:45:E7:68:E6:93:CC:31:56:AE:48:25:B5:89:FC Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A32 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-ZrgXIFRRedo5pPMMVauSCW1ifw.roa Signing time: Fri 22 Aug 2025 08:53:49 +0000 ROA not before: Fri 22 Aug 2025 08:53:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 123.205.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6706 (0x1a32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F99AE05C815145E768E693CC3156AE4825B589FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:77:54:29:1e:35:08:3c:ea:64:32:cf:40:38: f7:c9:14:c4:e2:d4:9c:60:1c:53:2b:00:77:a0:8d: 9e:b2:5d:22:73:a7:69:e9:9c:2b:c2:38:08:f5:94: ce:1e:9c:c6:d5:cb:a3:a8:d6:99:7c:8b:26:c4:25: 8c:61:39:13:aa:60:6b:44:75:e1:e4:f5:53:6b:c1: 97:2e:f7:bb:2f:c6:ac:80:b1:27:c3:8f:93:bc:33: 8e:3f:d7:f5:9f:2f:a1:52:74:a4:ee:b6:5d:a6:1b: f0:dc:81:0e:3d:c2:5e:3f:ea:cb:55:50:d8:96:6f: 44:5b:68:79:2c:99:b3:92:d6:f8:02:a8:3f:9f:3d: 06:85:03:72:95:67:5f:25:14:c4:3c:df:c8:8a:db: 42:23:74:b3:60:ca:e3:75:ac:ca:65:6e:b3:d1:a5: 67:15:c3:59:70:0f:e7:14:7d:12:09:e2:98:a4:9e: e2:ec:ae:68:7a:f1:59:b7:1b:00:29:bf:b2:28:fa: 6a:7c:d3:08:ba:2a:a9:d2:5e:d9:e3:7e:82:0e:8e: c8:a7:4b:bd:27:6a:ff:52:5f:ab:d9:74:0f:a9:8a: d2:a5:d1:62:d5:26:4f:f7:2c:5f:ee:79:3f:4b:05: 40:02:d2:e5:25:5c:49:b9:21:88:53:74:bc:6f:47: 4f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9A:E0:5C:81:51:45:E7:68:E6:93:CC:31:56:AE:48:25:B5:89:FC X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-ZrgXIFRRedo5pPMMVauSCW1ifw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.0.0/18 Signature Algorithm: sha256WithRSAEncryption 04:d4:b3:4f:4b:ab:29:63:65:94:79:6d:fb:04:ce:1d:14:f4: 81:55:54:f1:fd:73:e1:9c:32:9f:d5:68:0d:23:19:e2:fa:c9: d9:ae:20:9d:78:2b:32:a9:c7:25:8d:7d:f2:4a:d0:ac:5f:79: df:c0:41:2f:15:a5:37:c2:82:94:57:6f:1c:8d:3a:df:5e:5e: 1e:07:f8:d5:48:e1:0f:66:3d:52:b6:67:b2:e2:a8:7f:e2:69: 92:0f:d6:a2:c1:9a:af:f1:0c:f6:fb:b1:31:1e:53:39:8a:f3: ca:7c:72:b7:e2:86:03:f3:a0:a4:6c:3a:a9:53:c9:13:57:ce: 24:1a:d6:28:2f:d4:22:44:b2:52:42:6b:15:d8:59:1e:4c:ec: 6f:cd:2b:ab:36:4e:32:46:75:9f:8f:68:ed:31:13:05:4d:75: 5f:85:ef:b9:53:30:b1:3a:fd:f0:53:f8:c9:ec:90:47:cf:85: a0:bf:b4:a3:f9:04:52:fe:69:a7:79:fa:4d:7e:96:83:02:0a: 64:2d:47:e6:93:a6:63:76:af:da:87:0e:7e:3b:7d:6c:19:72: 41:84:58:33:da:b5:35:70:29:f9:ca:b2:1b:d2:53:fd:29:e6: 08:e5:28:18:97:47:76:86:e9:44:fb:9e:a7:32:07:4d:0b:84: 6f:92:34:9e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGjIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzNDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY5OUFFMDVDODE1MTQ1 RTc2OEU2OTNDQzMxNTZBRTQ4MjVCNTg5RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDd1QpHjUIPOpkMs9AOPfJFMTi1JxgHFMrAHegjZ6yXSJzp2np nCvCOAj1lM4enMbVy6Oo1pl8iybEJYxhOROqYGtEdeHk9VNrwZcu97svxqyAsSfD j5O8M44/1/WfL6FSdKTutl2mG/DcgQ49wl4/6stVUNiWb0RbaHksmbOS1vgCqD+f PQaFA3KVZ18lFMQ838iK20IjdLNgyuN1rMplbrPRpWcVw1lwD+cUfRIJ4piknuLs rmh68Vm3GwApv7Io+mp80wi6KqnSXtnjfoIOjsinS70nav9SX6vZdA+pitKl0WLV Jk/3LF/ueT9LBUAC0uUlXEm5IYhTdLxvR0+bAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU+ZrgXIFRRedo5pPMMVauSCW1ifwwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvLVpyZ1hJRlJSZWRvNXBQTU1WYXVT Q1cxaWZ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnvNADAN BgkqhkiG9w0BAQsFAAOCAQEABNSzT0urKWNllHlt+wTOHRT0gVVU8f1z4Zwyn9Vo DSMZ4vrJ2a4gnXgrMqnHJY198krQrF9538BBLxWlN8KClFdvHI06315eHgf41Ujh D2Y9UrZnsuKof+Jpkg/WosGar/EM9vuxMR5TOYrzynxyt+KGA/OgpGw6qVPJE1fO JBrWKC/UIkSyUkJrFdhZHkzsb80rqzZOMkZ1n49o7TETBU11X4XvuVMwsTr98FP4 yeyQR8+FoL+0o/kEUv5pp3n6TX6WgwIKZC1H5pOmY3av2ocOfjt9bBlyQYRYM9q1 NXAp+cqyG9JT/SnmCOUoGJdHdobpRPuepzIHTQuEb5I0ng== -----END CERTIFICATE-----Generated at Sun Aug 24 13:52:14 2025 by rpki-client